Before you begin
SSO is available to all Autodesk customers.
SSO is set up at the domain level for all users. Turning on SSO for a team means that all users belonging to the same organization and domain, even if they are in different teams, use SSO to sign in. This team serves as the control center for managing domains and SAML connections.
Pre-requisites
An organization domain and an admin account established through an identity provider (a service that stores and verifies users’ identities) are required with the ability to set up a SAML connection.
Users are no longer able to sign in with their Autodesk password once SSO is turned on. Instead, users are taken to the sign-in page for their organization, where the email address and password are entered.
When SSO is enabled or turned on, it takes effect instantly. To change or modify the connection, the user must contact Autodesk support. To add test users and access Autodesk products and services, refer Test and turn on SSO.
SAML (security assertion markup language) is the open standard used by SSO providers to communicate that a user is authenticated. It connects identity providers and service providers (in this case, Autodesk) to authorize users to sign in with SSO.
When Just-In-Time (JIT) provisioning is enabled for domains with SSO, users are automatically added to the team upon successful login. It is recommended to select the team carefully while configuring the SSO domain, and the user must be part of the selected team in order to log in via SSO.
SSO setup access is unavailable if the subscription is removed. This disrupts the user provisioning via JIT, resulting in the need to reconfigure SSO with the correct subscription to restore the functionalities.
Please see the FAQ section and Troubleshooting for more details regards your configuration.